Which two SQL Injection types would give her the results she is looking for?

Ethical hacker jane Smith is attempting to perform an SQL injection attach. She wants to test the response time of a true or false response and wants to use a second command to determine whether the database will return true or false results for user IDs.

Which two SQL Injection types would give her the results she is looking for?
A . Out of band and boolean-based
B . Time-based and union-based
C . union-based and error-based
D . Time-based and boolean-based

View Answer

Answer: C

Explanation:

Union based SQL injection allows an attacker to extract information from the database by extending the results returned by the first query. The Union operator can only be used if the original/new queries have an equivalent structure Error-based SQL injection is an In-band injection technique where the error output from the SQL database is employed to control the info inside the database. In In-band injection, the attacker uses an equivalent channel for both attacks and collect data from the database.